Security Center policy assignment enforcement is Default

# Set enforcement mode to Default for the Security Center built-in assignment
resource "azurerm_policy_assignment" "<example_resource_name>" {
  name                 = "SecurityCenterBuiltIn"
  scope                = "/subscriptions/<SUBSCRIPTION_ID>"
  policy_definition_id = "<POLICY_OR_INITIATIVE_DEFINITION_ID>"
  enforcement_mode     = "Default" # CRITICAL: Enables enforcement to pass the check
}

// Set enforcement mode to Default for the Security Center built-in assignment
// Deploy at subscription scope
targetScope = 'subscription'

resource policyAssignment 'Microsoft.Authorization/policyAssignments@2021-06-01' = {
  name: 'SecurityCenterBuiltIn'
  properties: {
    policyDefinitionId: '<POLICY_OR_INITIATIVE_DEFINITION_ID>'
    enforcementMode: 'Default' // CRITICAL: Ensures the assignment enforces policy (fixes the finding)
  }
}